Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: i5v3Cm4Nx792nsbgi6ZmclM0UY1rjCl7CpLT0cYKQK4=
Subject key identifier: 94:29:B2:84:69:35:C5:10:63:5B:29:82:ED:C7:C2:A0:67:98:30:8F
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 0197526B414C140A5CDF9FFB18168D56686E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0A90
Signing time: Mon 09 Jun 2025 02:00:50 +0000
Manifest this update: Mon 09 Jun 2025 02:00:50 +0000
Manifest next update: Tue 10 Jun 2025 02:00:50 +0000
Files and hashes: 1: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: dsweQsPLM89NHHublPhKdAfDsQBGcSDf6gY2Y9VBVj4=)
2: dWBxYutd_7kq_EDB_JG4WIKLpyo.roa (hash: xSMt2hTKh36QhaSaerON9NeweGqlZocu9OE/cvG7CnM=)
3: sRhEXZaGwXqtptay-RphiAgSVt4.roa (hash: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:41:4c:14:0a:5c:df:9f:fb:18:16:8d:56:68:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Jun 9 02:00:50 2025 GMT
Not After : Jun 10 02:00:50 2025 GMT
Subject: CN=9429b2846935c510635b2982edc7c2a06798308f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:be:93:04:f0:59:ab:f7:9f:51:fe:fa:19:e3:
34:04:b9:1b:3c:34:24:5f:20:e3:34:4d:01:19:b9:
05:42:25:d3:8b:f6:f8:2c:30:39:0f:c7:ac:a0:35:
39:5b:18:b6:8b:2e:f9:75:73:45:96:8e:51:a9:0a:
86:5c:dd:d2:ce:9a:13:57:d8:38:97:17:4c:c2:ee:
2e:7b:70:c5:4c:db:93:e7:a2:19:fe:f8:3b:ac:ab:
55:c8:d9:53:3f:3b:9c:29:41:a8:fb:3d:b0:04:a3:
a7:58:a3:26:b0:31:b1:e5:5f:7d:1a:28:1f:cd:69:
49:09:7a:19:22:1c:c3:c9:92:f6:1e:33:87:47:2b:
fc:1f:77:02:25:1e:c6:e3:70:b0:e2:c2:68:1b:2f:
ad:98:5c:ae:ea:62:3e:d5:bc:a4:d8:55:21:5b:cd:
cc:7a:50:02:61:42:c0:63:cc:d8:17:91:d1:46:e8:
2a:2b:9c:d6:aa:68:66:e0:ca:e7:5b:dd:f7:b1:c5:
db:ad:10:b5:d3:11:23:fe:5f:37:29:cd:ee:ce:02:
89:3c:54:de:00:c0:6f:88:b4:76:b4:fe:6b:f3:1a:
60:3f:2d:28:cd:17:86:25:74:49:8e:e5:b4:42:80:
ec:7f:08:54:fc:b3:bb:9b:cb:83:29:f6:d0:80:61:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:29:B2:84:69:35:C5:10:63:5B:29:82:ED:C7:C2:A0:67:98:30:8F
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d3:87:41:ae:0b:6d:e6:2f:87:ea:1c:4b:dc:d0:55:d3:af:
7b:af:9c:a4:9a:79:79:99:3a:da:0f:92:55:ae:0a:e9:37:05:
51:4e:62:32:79:48:61:86:c0:d1:a4:3d:50:76:70:0b:d0:f3:
c2:42:ca:e4:21:e9:1f:61:0d:97:f3:06:cb:f5:ec:43:d3:63:
b4:c2:00:21:5d:a5:cb:1d:a5:93:34:73:6b:86:a7:da:d3:c7:
c7:68:b6:ee:03:39:e9:67:2a:f0:89:41:74:ab:29:53:83:e5:
7b:71:91:a5:4b:92:46:2d:b8:fd:31:cf:51:71:1e:61:cc:7c:
f3:9a:19:56:ce:88:a3:85:6e:36:1f:43:82:d5:e8:c8:36:97:
97:d9:8c:40:d1:70:6b:c3:d3:a7:90:f5:0c:59:84:1a:82:f7:
96:5a:67:8a:b5:f4:74:ed:f1:6b:19:b7:37:7c:e1:ba:6e:4c:
b4:b4:08:56:cd:0a:51:01:b2:10:81:37:8f:56:e3:59:04:3b:
88:6a:3e:f2:5b:a9:41:0a:a9:dd:34:77:d0:3e:5d:69:ae:db:
ad:65:9c:97:71:0c:7b:9e:b2:74:a7:04:55:e9:71:9a:a6:1b:
01:20:cc:3c:24:83:67:26:e4:f3:d6:55:85:27:b6:12:e2:d3:
f1:34:23:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSa0FMFApc35/7GBaNVmhuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3N2Q0ZWEyYzAxNmNlMjc5N2FmN2FlYjczN2QxMzI4NzU2
NjlmMTIwHhcNMjUwNjA5MDIwMDUwWhcNMjUwNjEwMDIwMDUwWjAzMTEwLwYDVQQD
Eyg5NDI5YjI4NDY5MzVjNTEwNjM1YjI5ODJlZGM3YzJhMDY3OTgzMDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL6TBPBZq/efUf76GeM0BLkbPDQk
XyDjNE0BGbkFQiXTi/b4LDA5D8esoDU5Wxi2iy75dXNFlo5RqQqGXN3SzpoTV9g4
lxdMwu4ue3DFTNuT56IZ/vg7rKtVyNlTPzucKUGo+z2wBKOnWKMmsDGx5V99Gigf
zWlJCXoZIhzDyZL2HjOHRyv8H3cCJR7G43Cw4sJoGy+tmFyu6mI+1byk2FUhW83M
elACYULAY8zYF5HRRugqK5zWqmhm4MrnW933scXbrRC10xEj/l83Kc3uzgKJPFTe
AMBviLR2tP5r8xpgPy0ozReGJXRJjuW0QoDsfwhU/LO7m8uDKfbQgGEN5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQpsoRpNcUQY1spgu3HwqBnmDCPMB8GA1UdIwQY
MBaAFGd9TqLAFs4nl69663N9Eyh1Zp8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUt
YjhmM2YwOWVhYWRlLzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUtYjhmM2YwOWVhYWRl
LzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNOHQa4L
beYvh+ocS9zQVdOve6+cpJp5eZk62g+SVa4K6TcFUU5iMnlIYYbA0aQ9UHZwC9Dz
wkLK5CHpH2ENl/MGy/XsQ9NjtMIAIV2lyx2lkzRza4an2tPHx2i27gM56Wcq8IlB
dKspU4Ple3GRpUuSRi24/THPUXEeYcx885oZVs6Io4VuNh9DgtXoyDaXl9mMQNFw
a8PTp5D1DFmEGoL3llpnirX0dO3xaxm3N3zhum5MtLQIVs0KUQGyEIE3j1bjWQQ7
iGo+8lupQQqp3TR30D5daa7brWWcl3EMe56ydKcEVelxmqYbASDMPCSDZybk89ZV
hSe2EuLT8TQjWA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:22:12 2025 by rpki-client